Domain Architect - IT security

Teknik, data och digitalt · IT-infrastruktur och säkerhet · Cybersäkerhet

I korthet

This senior role defines, governs, and assures secure, resilient, and scalable cybersecurity architectures for industrial and Operational Technology (OT) environments. The OT Security Architect translates business and operational requirements into practical target architectures and security patterns, providing technical leadership across OT/IT segmentation, remote access, and platform security for complex industrial programs.

Ansvarsområden

Define and maintain OT cybersecurity reference architectures, principles, patterns, standards, and technology roadmaps.
Assess current-state architectures and develop pragmatic transition states and target-state designs for industrial environments.
Translate business, operational, safety, and security requirements into architecture decisions, control requirements, and design specifications.
Lead architecture reviews for new plants, production lines, industrial platforms, connected products, and major technology changes.
Design and govern OT/IT segmentation using zones and conduits, industrial DMZs, security zones, trust boundaries, and controlled data flows.
Define secure connectivity patterns for plant networks, remote sites, cloud or edge services, vendor access, and inter-site communications.
Architect Zero Trust remote access using identity-aware, least-privilege, time-bound, and approval-based controls.
Define identity and access architecture for OT users, administrators, service accounts, vendors, and non-human identities.
Lead OT architecture risk assessments, threat modeling, design reviews, and control-gap analyses.
Define architecture requirements for asset visibility, security monitoring, logging, anomaly detection, and integration with SOC or incident response processes.
Act as the senior architecture interface across plant engineering, operations, IT, cybersecurity, safety, risk, compliance, and programme leadership.
Evaluate vendor and product architectures, challenge design assumptions, and ensure solutions meet approved security and operational requirements.
Mentor OT security engineers and architects, promote reusable patterns, and strengthen architecture capability across the organization.

Krav

Minimum 14 years of overall experience in cybersecurity, industrial automation, network security, or infrastructure, including substantial experience in OT/ICS environments.
Demonstrated experience leading OT security architecture for complex, multi-site, brownfield, or greenfield industrial programs.
Proven experience developing security architectures, segmentation models, risk assessments, standards, roadmaps, and design-assurance outputs.
Experience engaging plant operations, engineering, enterprise IT, security, risk, vendors, and senior stakeholders across the solution lifecycle.
Experience designing and governing remote access for industrial environments, including Cyolo Secure Remote Access and integration with identity, MFA, privileged-access, monitoring, and governance processes.
Deep understanding of industrial environments and the operational characteristics of SCADA, DCS, PLC, HMI, historian, engineering workstation, and industrial server platforms.
Ability to work within production, safety, lifecycle, availability, and change constraints that differ from traditional enterprise IT.
Strong knowledge of Purdue-aligned architectures, zones and conduits, industrial DMZs, segmentation, network security architecture, and controlled OT/IT data exchange.
Knowledge of industrial and supporting protocols such as Modbus TCP, OPC UA, EtherNet/IP, PROFINET, DNP3, IEC 60870-5-104, MQTT, and vendor-specific protocols.
Architecture-level knowledge of industrial firewalls, IDS/IPS, NAC, OT secure remote access, PAM, IAM, MFA, PKI, endpoint controls, asset visibility, vulnerability management, SIEM, and security monitoring.
Proven ability to produce architecture principles, patterns, standards, roadmaps, design decisions, threat models, and risk-based recommendations.
Experience governing designs through architecture review boards, technical assurance gates, exceptions, and implementation oversight.
Strong working knowledge of IEC 62443 and NIST guidance for industrial control systems; familiarity with ISO 27001 and sector-specific requirements is advantageous.

Önskade kvalifikationer

Bachelor’s degree in engineering, Computer Science, Cybersecurity, Information Technology, or a related discipline; a relevant master’s degree is advantageous.
Preferred certifications include IEC 62443 Cybersecurity Expert or equivalent, GICSP, CISSP, CISM, SABSA, TOGAF, or other relevant architecture and industrial cybersecurity credentials.
Hands-on architecture or design experience with Cyolo Secure Remote Access is strongly preferred; exposure to comparable OT remote access solutions such as Secomea, BeyondTrust, and Claroty secure-access capabilities is advantageous.
Ability to interpret control objectives and apply them proportionately to industrial risks, operational constraints, and business priorities.

Förmåner

Consolidated revenues as of 12 months ending September 2026 totaled $14.8 billion.

Färdigheter

SCADADCSPLCHMIOPC UAEtherNet/IPPROFINETDNP3IEC 60870-5-104MQTTfirewallIDS/IPSNACCyolo Secure Remote AccessSecomeaBeyondTrustClarotyPAMIAMMFAPKISIEMIEC 62443NIST Cybersecurity FrameworkISO 27001SABSATOGAFGICSPCISSPCISM

#OT Architecture#Cybersecurity#IT Security#Industrial Control Systems#Network Segmentation#Remote Access#Zero Trust#Risk Management#Compliance#Security Assurance#Resilience#Incident Response#Vendor Management#Architecture Governance

Om HCLTech

Supercharging progress through technology and innovation

HCLTech is a global technology company, home to 219,000+ people across 54 countries, delivering industry-leading capabilities centered around digital, engineering and cloud, powered by a broad portfolio of technology services and products. We work with clients across all major verticals, providing industry solutions for Financial Services, Manufacturing, Life Sciences and Healthcare, Technology and Services, Telecom and Media, Retail and CPG, and Public Services. Consolidated revenues as of 12 months ending September 2022 totaled $12.1 billion. To learn how we can supercharge progress for…

Se alla lediga jobb hos HCLTech Läs mer om HCLTech Webbplats